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(57) ABSTRACT 

Methods and apparatus are provided for evaluating the per- 
formance of a Time Triggered Ethernet (TTE) system 
employing Time Triggered (TT) communication. A real TTE 
system under test (SUT) having real input elements commu- 
nicating using TT messages with output elements via one or 
more first TTE switches during a first time interval schedule 
established for the SUT. A simulation system is also provided 
having input simulators that communicate using TT mes- 
sages via one or more second TTE switches with the same 
output elements during a second time interval schedule estab- 
lished for the simulation system. The first and second time 
interval schedules are off-set slightly so that messages from 
the input simulators, when present, arrive at the output ele- 
ments prior to messages from the analogous real inputs, 
thereby having priority over messages from the real inputs 
and causing the system to operate based on the simulated 
inputs when present. 

20 Claims, 2 Drawing Sheets 
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TIME TRIGGERED ETHERNET SYSTEM 
TESTING MEANS AND METHOD 

STATEMENT REGARDING FEDERALLY 
SPONSORED RESEARCH OR DEVELOPMENT 

This invention was made with Government support under 
Government Contract # NNJ06TA25C awarded by NASA. 
The Government has certain rights in the invention. 

TECHNICAL FIELD 

The present invention generally relates to functional test- 
ing of complex systems, and more particularly relates to 
functional testing of complex systems employing Time-Trig- 
gered Ethernet (TTE) control and communication (C&C) 
protocols. 

BACKGROUND 

Complex electro-mechanical systems often employ com- 
munication networks interconnecting the various elements in 
the system, over which data, control signals, feedback signals 
and various other types of information (collectively “mes- 
sages”) are exchanged. Non-limiting examples of such com- 
plex systems are electrical distribution networks, power 
plants, refineries, manufacturing lines, ships, space-craft, air- 
craft, vehicles, industrial controls and so forth. “Ethernet” 
defined by IEEE Standard 802.3 is a well known system 
control and communication (C&C) protocol used in such 
systems. Recently, a more robust version of Ethernet better 
suited to mission critical applications has been developed, 
referred to as “Time Triggered Ethernet” (TTE) defined by 
SAE Standard AS6802. Various components for implement- 
ing Ethernet and TTE based communication and control 
(C&C) systems are commercially available. 

A problem encountered with complex systems is the diffi- 
culty and expense of testing such systems to detennine how 
they will operate under various circumstances. For example 
and not intended to be limiting, how does the system output 
change in response to various input changes, or what happens 
if some of the system elements encounter abnormal condi- 
tions, or what happens if one of several Ethernet communi- 
cation paths degrades, and so forth? With large and complex 
systems it is not always possible to answer such questions 
merely by theoretical analysis and actual system tests are 
needed. In many cases the physical alterations needed to 
execute such tests are impractical (e.g., on a satellite in space) 
or prohibitively expensive (e.g., on a power distribution net- 
work) or for other reasons. Accordingly, it is desirable to 
provide a means and method for testing complex electrical, 
electro-mechanical, electronic and other systems employing 
Time Triggered Ethernet (TTE) C&C protocols. In addition, 
it is desirable to provide the capability to simulate various 
physical circumstances in place and without disassembling or 
reconstructing the physical system for each test. Furthermore, 
other desirable features and characteristics of the present 
invention will become apparent from the subsequent detailed 
description of the invention and the appended claims, taken in 
conjunction with the accompanying drawings and this back- 
ground of the invention. 

BRIEF SUMMARY 

An apparatus (62) is provided for evaluating the perfor- 
mance of a control and communication (C&C) system (64). 
The apparatus (62) includes the real physical Time Triggered 


2 

Ethernet (TTE) control and communication (C&C) system 
under test (SUT) (64), having real input elements (71, 72), 
adapted to communicate using time triggered (TT) commu- 
nication protocols with real output elements (83-85; 73-75) 
5 via one or more first TTE switches (91, 92) during a first time 
interval schedule (44E-/, 44E-(i+l )) established for the SUT 
(64). The apparatus (62) further includes a simulation system 
(66) having input simulators (87, 88) that communicate using 
TT communication with the real output elements (83-85; 
10 73-75) via one or more second TTE switches (93) during a 
second time interval (44S-;, 44S-(i+l)) schedule established 
for the simulation system (66). The first (44E-;, 44E-(i+l)) 
and second (44S-/, 44S-(i+l)) time interval schedules are 
15 off-set by amount At so that messages from the input simu- 
lators (87, 88) when present arrive at the output elements 
(83-85; 73-75) prior to messages from the real input elements 
(71, 72), thereby having priority over messages from the real 
input elements (71, 72) and causing the system to operate 
20 based on the messages from the input simulators (87, 88) 
when present. 

A method is provided for in-place testing of Time Trig- 
gered Ethernet (TTE) command and control (C&C) system 
(64) having real input devices (71, 72) and output interfaces 
25 (83-85; 73-75) that communicate through one or more 
switches (91, 92) during first predetermined time intervals 
(44E-I, 44E-(i+l)) set by a time scheduling system 
(E-SCHEDULE 60) associated with the C&C system (64) as 
to when outputs from the real input devices (71, 72) can be 
,( 1 sent to the output interfaces (83-85; 75). The method includes 
providing a simulation subsystem (66) having therein simu- 
lated input devices (87, 88) adapted to provide predetermined 
or dynamically calculated outputs mimicking the outputs of 
35 the real input devices (71, 72) and communicating with the 
output interfaces (83-85; 73-75) through at least a further 
switch (93) during second predetermined time intervals (44S- 
/. 44S-(i+l )) set by a time scheduling system (S-SCHEDULE 
69) associated with the simulation subsystem system (66) as 
40 to when outputs from the simulated input devices (87, 88) can 
be sent to the output interfaces (83-85; 73-75), and adjusting 
the second predetermined time intervals (44S-/, 44S-(i+l)) 
relative to the first predetermined time intervals (44E-I, 44E- 
(i+1)), so that the outputs from the simulated input devices 
45 (87. 88) arrive at the output interfaces (83-85; 73-75) prior to 
the outputs from the real input devices (71, 72). 

BRIEF DESCRIPTION OF THE DRAWINGS 

50 The present invention will hereinafter be described in con- 

junction with the following drawing figures, wherein like 
numerals denote like elements, and 

FIG. 1 illustrates a generic Ethernet control and commu- 
nication (C&C) system according to the prior art; 

55 FIG. 2 illustrates an Ethernet control and communication 
(C&C) system employing redundancy, according to the prior 
art; 

FIG. 3 illustrates a Time Triggered Ethernet system mes- 
sage time base or schedule, wherein specific time intervals are 
60 identified as being reserved for different types of communi- 
cation; 

FIG. 4 illustrates an Ethernet control and communication 
(C&C) system according to an embodiment of the invention 
in which system behavior may be tested or evaluated in place 
65 for various changes in circumstances; and 

FIG. 5 shows a time scheduling chart illustrating message 
transmission intervals associated with the system of FIG. 4 
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that allows simulated data to be introduced to evaluate the 
behavior of the system of FIG. 4 under predetermined test 
conductions. 

DETAILED DESCRIPTION 

The following detailed description is merely exemplary in 
nature and is not intended to limit the invention or the appli- 
cation and uses of the invention. As used herein, the word 
“exemplary” means “serving as an example, instance, or 
illustration.” Thus, any embodiment described herein as 
“exemplary” is not necessarily to be construed as preferred or 
advantageous over other embodiments. All of the embodi- 
ments described herein are exemplary embodiments provided 
to enable persons skilled in the art to make or use the inven- 
tion and not to limit the scope of the invention which is 
defined by the claims. Furthermore, there is no intention to be 
bound by any expressed or implied theory presented in the 
preceding technical field, background, brief summary, or the 
following detailed description. 

Time Triggered Ethernet systems employ three communi- 
cation classes of successively lower priority: (1) Time Trig- 
gered (TT) communication according to SAE AS6802 Stan- 
dard, (2) Rate Constrained (RC) communication according to 
ARINC 664 Part 7 Standard, and Best Effort (BE) commu- 
nication according to Ethernet IEEE 802.3 Standard. In TT 
communication, data or other signals (“messages”) are trans- 
ported in a time-triggered manner through the network. Send- 
ing elements, receiving elements and elements in between 
know, for example, by use of a pre-configured time base or 
schedule, at which point in time particular data or other mes- 
sages should be transported from source to destination. For 
this reason a common time base or schedule is provided in 
such systems, synchronized across all devices or system ele- 
ments. Confirmations are not necessary, since each system 
gateway, switch, etc., has the same time base or schedule 
information. TT communication provides the most robust and 
reliable communication and, other than time synchronization 
information, has the highest priority in the system. 

FIG. 1 illustrates generic Ethernet control and communi- 
cation (C&C) system 20 according to the prior art. System 20 
includes, by way of example and not limitation, six individual 
system input-output (I/O) elements E-l through E-6, identi- 
fied by reference numbers 21 through 26 respectively, 
coupled to each other through switch 40. System elements 
21-26 (E1-E6) are individually coupled to switch 40 via Net- 
work Interface Controllers (hereafter NICs) 31-36, and path- 
ways or links 50, 52. System elements 21-26 (E1-E6) may be 
sensors, actuators, timers, displays, computers, control termi- 
nals and/or other input-output or data processing devices of 
any kind; e.g., whatever as needed to support the overall 
function of system 20. The term “effector” is used herein to 
refer generically to any output device. The tenn “computer” is 
used herein to refer generically to any intermediate data pro- 
cessing device, including control computers or processors. 
For convenience of explanation and not intended to be limit- 
ing, the embodiments illustrated herein show a distributed 
system consisting of separately packaged sensors, computers 
and effectors. Persons of skill in the art will understand that in 
various other embodiments, sensors, computers and effectors 
may be combined for packaging efficiency or distributed to 
place them close to the devices they sense and control. All 
such arrangements are useful and intended to be included. 
NICs 31-36 may be stand-alone units or may be integrated 
with system I/O elements 21-26 (E1-E6). 

NICs 31-36 are the gateways or interfaces between end 
system I/O elements 21-26 (E1-E6) and switch 40 and insure 


4 

that the messages sent to and from system I/O elements 21-26 
(E1-E6) through switch 40 conform to the overall Ethernet 
C&C system message protocol. NICs 31-36 and their associ- 
ated system I/O elements 21-26 (E1-E6) may be thought of as 
5 being the “leaves” of the network “tree” structure. System 20 
of FIG. 1 illustrates only single switch 40, but in other sys- 
tems, multiple switches are often employed. Multiple 
switches are used to allow greater numbers of system I/O 
elements E-i where i=l, 2, 3, ... N, to be interconnected 
to and/or to introduce redundancy so that a more robust system 
can be provided. Such switches along with links 50, 52 may 
be considered the “branches” and “trunk” of the network tree 
structure of system 20. When system 20 is a TT communica- 
tion system, NICs 31-36 and switch 40 have a common time 
15 reference schedule or time base, indicated symbolically by 
E-SCHEDULE 60. This is explained more fully in connec- 
tion with system 20' of FIG. 2 and with FIG. 3. 

FIG. 2 illustrates Ethernet control and communication 
(C&C) system 20' employing redundancy, according to the 
20 prior art. Additional switch 42 has been added in system 20' 
linking system I/O elements 21-26 via NICs 31-36 and paths 
or links 51, 53 to make overall system 20' more robust. For 
purposes of explanation, assume that a signal generated by 
system I/O element 21 (E-l) is to be sent to system I/O 
25 element 24 (E-4) where it is intended to produce some action 
or desired outcome. In system 20', transmitting NIC 31 sends 
duplicate messages from system I/O element 21 (E-l) via 
links 51 to switch 40 (e.g., SWITCH-1) and switch 42 (e.g., 
SWITCH-2), which in turn transmit the duplicate messages 
30 via links 53 to NIC 34 coupled to I/O element 24 (E-4). A first 
of the duplicate messages goes from NIC 31 via link 511 to 
switch 40 and then via link 531 to NIC 34. A second of the 
duplicate messages goes from NIC 31 via link 512 to switch 
42 and then via link 532 to NIC. 34. NIC 34 need only receive 
35 one of the two duplicate messages to pass it along to system 
I/O element 24 (E-4) for the message to be effective. Thus, 
either (but not both) of communication C&C paths 511-40- 
531 or 512-42-532 of system 20' of FIG. 2 can be defective 
and system 20' will still function. System 20' of FIG. 2 is 
40 therefore more robust than system 20 of FIG. 1. In the 
example of FIG. 2, analogous duplicate C&C paths also exist 
between remaining I/O elements 22, 23 and 25, 26 via their 
associated NICs 32, 33 and 35, 36. 

With system 20' of FIG. 2, whenboth communication paths 
45 are functioning, NIC 34 receives both duplicate messages. In 
a Time Triggered Ethernet (TTE) system employing, for 
example TT communication, for such messages, NIC 34 is 
constrained to accept the first of the duplicate messages to 
arrive, discarding later duplicate messages. Switches 40, 42 
50 test each incoming message to determine its relative arrival 
time within the assigned transmission time interval (e.g., 
interval 44 of FIG. 3) and to insure that it conforms to the 
expected fonnat of a message originating from NIC 31 or 
such other NICs as are allowed to link to Switches 40, 42. 
55 Such overall system definition and allowed transmission time 
schedule information is stored, for example, in look-up tables 
accessible to the various NICs, switches, etc. Thus, messages 
arriving at NIC 34 (and other NICs) are tested both for allow- 
able origin, fonnat and timing. These features of TTE can be 
60 used to avoid undesirable message conflicts and fault-induced 
masquerading of one device as another. 

As with system 20, system 20' employs a common time 
base or schedule represented symbolically by E-SCHEDULE 
60 so that NICs 31-36 and switches 40, 42 share such com- 
65 mon time base or schedule information. This is important 
since it allows high priority messages to be assigned to spe- 
cific time slots for conflict-free time-triggered (TT) co mmn - 
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nication, while other messages (e.g., RC communication and 
BE communication messages) are naturally relegated to 
lower priority signaling intervals when TT communication 
messages are absent. FIG. 3 illustrates exemplary message 
time base or schedule 70 wherein specific time intervals 44-/, 5 
46-/, 48-/ (i=l, 2,3, 4, etc.) are identified as being reserved for 
different types of communication. For example, time blocks 
or intervals 44-1, 44-2, 44-3, 44-4, 44-5, 44-6, 44-7 (collec- 
tively 44) are reserved forTT communication messages, time 
blocks or intervals 46-1, 46-2 (collectively 46) and time to 
blocks or intervals 48-1, 48-2, 48-3, 48-4 (collectively 48) are 
reserved for RC communication messages and for BE com- 
munication messages, defined above. In Time Triggered Eth- 
ernet (TTE), TT communication messages are explicitly 
scheduled at specific times, while RC and BE communication 15 
messages are not explicitly scheduled, but “flow through” the 
available “holes” in the TT communication schedule. RC 
communication messages take priority over BE communi ca- 
tion messages. Further, any message already in progress is 
allowed to complete regardless of priority. Therefore an 20 
explicitly scheduled TT communication message might have 
to wait on the completion of a non-scheduled BE communi- 
cation message, so the maximum duration of another message 
has to be accounted for in the explicit TT communication 
schedule. This approach enables TTE to support “plain old 25 
Ethernet” (e.g., BE communication) flawlessly while also 
providing a provable guarantee of TT communication mes- 
sage delivery without conflict from lower traffic classes. This 
flexibility extends to the embodiments described herein and is 
a valuable characteristic of the present invention. 30 

E-SCHEDULE 60 is shown in FIGS. 1-2 and 4 as if it were 
a separate sub-network sending timing information to all 
NICs and switches, but that is not essential and E-SCITED- 
ULE 60 shown in FIGS. 1-2 and 4 is intended to symbolically 
represent the common time base or schedule (e.g., such as 35 
illustrated in FIG. 3) available to all system elements, how- 
ever such common time base or schedule information is pro- 
vided. In many physical realizations of TTE each NIC and 
switch incorporates an internal clock, which clocks are kept 
in synchronism via messages passed through the network 40 
using, for example, links or paths 50-53, and each NIC and 
switch has available the time base or schedule when different 
kinds of communications are allowed. Such synchronizing 
messages are referred to as Protocol Control Frames (PCFs) 
and have the highest priority of any network traffic. For the 45 
purposes of this invention it does not matter how time disci- 
pline or scheduling is provided, merely that it exists in the 
overall system and is used (e.g., in TTE) to permit certain 
classes of messages to be accepted and others discarded 
depending upon when they are transmitted and received 50 
within their specified time intervals. 

FIG. 4 illustrates Time Triggered Ethernet (TTE) control 
and communication (C&C) system 62 with built-in test capa- 
bility, according to an embodiment of the invention. With 
system 62, the behavior of a real physical system (e.g., system 55 
64 ) may be tested or evaluated in place for various changes in 
circumstances. System 62 includes real physical system 64 
and simulation sub-system 66 . System 64 illustrates an exem- 
plary TTE physical control and communication (C&C) sys- 
tem under test (SUT), and subsystem 66 illustrates a parallel 60 
TTE simulation system (SS) coupled, in this example, to 
computing and output elements (e.g., elements 73-75) of SUT 
64 in such a way that the behavior of SUT 64 can be evaluated 
in place without disassembling or otherwise disturbing actual 
physical C&C system 64. 65 

SUT 64 includes exemplary system I/O elements 71-75 
coupled to each other via NICs 81-85, switches 91, 92 (e.g., 
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SWITCHES 1 and 2) and paths or links 551, 552, 553, 554 
(collectively 55) and 561, 562, 563. 564, 565, 566 (collec- 
tively 56). Such I/O elements, NICs, switches and paths are 
analogous to equivalent elements or components described in 
connection with FIGS. 1-2 and may be of any of the various 
types discussed earlier. For convenience of explanation and 
not intended to be limiting, it is assumed in connection with 
sub-system 64 of FIG. 4, that I/O elements 71 and 72 are 
sensor S-l and S-2 providing physical parameter inputs to 
physical SUT 64, and that I/O element 73 is an effector. For 
convenience of explanation and not limitation, I/O elements 
74, 75 are presumed to embody computers or other control 
elements adapted to receive physical inputs from sensors 71, 
72 (S-l, S-2), perform various calculations or transforma- 
tions using such information, and provide a control signal to 
I/O element (e.g., effector) 73 thereby causing I/O element 7.3 
to perform some desired action. As used herein, the terms 
“computers” and “control elements” are not limited merely to 
conventional processors or micro-processors but are intended 
to include any devices or elements that that can modify the 
signals received from I/O elements 71, 72 as may be needed 
so that they can activate effector 73. The term “effector” is 
intended to include any type of output device that causes a 
physical change of some sort. Non-limiting examples of 
“effectors” are displays, data-loggers, control valves, 
throttles, switches, rheostats, information storage devices, 
hydraulic or pneumatic actuators, linear or rotary actuators, 
lamps, alarms, and so forth. The combination of NICs 83-85 
and I/O elements 73-75 are also referred to as output elements 
or output interfaces 83-85; 73-75. 

Physical C&C system 64 functions under the standard 
TTE/TT C&C protocol based on a common time base or time 
schedule (e.g., analogous to that of FIG. 3), represented sym- 
bolically by E-SCHEDULE 60 shared by the various ele- 
ments of system 64. Under the standard TT communication 
protocol, sensor readings originating in I/O elements 71, 72 
are communicated to I/O elements 73-75 during predeter- 
mined time intervals (e.g., TT communication intervals 44 of 
FIG. 3) determined by the common time base or schedule 
represented by E-SCHEDULE 60. System 64 is, by way of 
example, a redundant system but this is not essential. As has 
been explained in connection with system 20' of FIG. 2, under 
the standard TT communication protocol, whichever mes- 
sage (e.g., sensor readings from I/O elements 71 and/or 72) 
arrives first at NICs 84-85 during the predetermined trans- 
mission interval for such messages, is accepted and any dupli- 
cate messages arriving later in the predetermined transmis- 
sion interval from the same source, e.g., by a different 
network path, are discarded. Thus, system 64 automatically 
accepts or discriminates against TT communication mes- 
sages based on their relative arrival time during the predeter- 
mined transmission interval (e.g., interval 44 FIG. 3). It has 
been found that this capability of TTE systems can be used to 
advantage to permit operational testing of complex C&C 
systems in place, that is, without disassembling the system or 
removing or modifying the relevant I/O elements (e.g., ele- 
ments 71, 72 in the example of FIG. 4). 

Subsystem 66 includes simulation input elements 87, 88 
(SS-1, SS-2) designed to selectively mimic the outputs of 
input sensors 71, 72, associated NICs 97, 98 and switch 93 
(e.g., SWITCH-3), providing whatever sensor outputs are 
desired to be simulated. Simulation input element 87, 88 are 
programmable to the extent that they can provide to associ- 
ated NICs 97, 98 whatever synthetic sensor readings are 
desired to be used to test the behavior of system 64 under such 
circumstances. Persons of skill in the art will understand that 
simulation input elements 87, 88 are identified as “sensors” 
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merely to facilitate explanation and that they represent any 
type of system input element whose output is desired to be 
varied to evaluate the actual performance of physical system- 
under-test (SUT) 64 in response to such changes. Paths or 
links 57 couple NICs 97, 98 to switch 93 (e.g., SWITCH-3). 5 
Paths or links 58 couple switch 93 of sub-system 66 to NICs 
84, 85 of physical system 64. Thus, whatever parameter val- 
ues are being provided by simulation input elements 87, 88 of 
simulation subsystem 66 can be communicated to receiving 
NICs 83-85, and to associated computers or control elements 10 
74, 75 and eventually to output effector 73 of real physical 
system 64. 

The transmission of signals or messages originating from 
simulated input elements 87, 88 of simulation sub-system 66 15 
to I/O element 73-75 via associated NICs 83-85 of real physi- 
cal system 64 is controlled by the time base or time schedule 
associated with simulation sub-system 66, represented sym- 
bolically by S-SCHEDULE 68, and not by the time base or 
time schedule associated with real physical system 64 repre- 20 
sented symbolically by E-SCHEDULE 60. It has been found 
that by appropriately adjusting the time schedule represented 
by S-SCHEDULE 68 of simulation sub-system 66 relative to 
the time schedule represented by E-SCHEDULE 60 of real 
physical system 64, that real physical system 64 can be made 25 
to accept without conflict the data or signals originating from 
simulation inputs 87, 88 as if they originated from real system 
inputs 71, 72. This permits the behavior of real physical 
system 64 in response to the simulated sensor (or other) inputs 
to be directly evaluated. Furthermore, once simulation sub- 30 
system 66 has been installed and coupled to real physical 
system 64, physical system 64 need not be disassembled or 
otherwise modified in order to conduct any test within the 
capabilities of simulated sensors 87, 88 (S-l, S-2). Unless 
simulated data is being provided by simulation sub-system 35 
66, physical C&C system 64 functions as if simulation system 
66 is not present. Thus, by providing simulation input ele- 
ments (e.g., 87, 88), associated NICs (e.g., 97, 98) and further 
switch 93 of simulation sub-system 66, coupled to the appro- 
priate NICs and I/O element of physical system 64, the 40 
response of physical C&C system 64 can be evaluated in real 
time in response to changes of any number of input param- 
eters. Such testing and C&C evaluation may be carried out 
remotely and without further modification of real physical 
C&C system 64. Thus, the TTE testing system described 45 
above is especially suitable for use where physical modifica- 
tion of a system (e.g., system 64) for test purposes is imprac- 
tical (e.g., on a hilly assembled aircraft or a satellite) or 
prohibitively expensive (e.g., with a power or gas or fuel 
transmission system extending over vast distances or with 50 
other complex systems). This is a significant advance in the 
art. 

A simulation input element can be programmable so as to 
mimic input X as if from a real input sensor during one test 
and input Y or Z during other tests, so long as such inputs do 55 
not need to be provided at the same time. The complexity of 
simulation sub-system 66, e.g., the number of simulation 
inputs, NICs and switches, depends on the number of simul- 
taneous input variable changes that need to be provided to 
evaluate behavior of the physical system. The example of 60 
FIG. 4 shows simulation sub-system 66 capable of simulta- 
neous and independent variation of two variable input sources 
provided by simulation input elements 87, 88 (e.g., SS-1, 
SS-2). Any number of simulation inputs, associated NICs and 
switches can be provided to allow real-time testing of real 65 
physical C&C system 64 of whatever complexity and simul- 
taneously varied parameters as are needed. 
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As has been previously explained (e.g., see FIG. 3), Time 
Triggered Ethernet (TTE) with Time Triggered (TT) commu- 
nication provides that TT communication messages are trans- 
mitted during predetermined intervals controlled by the sys- 
tem time base symbolically represented by E-SCHEDULE 
60, and as is further explained, only the first message of the 
proper format arriving at the destination NIC during the pre- 
determined communication interval will be accepted and 
acted upon. This is a specified feature of the TTE/TT proto- 
col. It has been found that by providing an appropriate offset 
At of the time base or time schedule (e.g., S-SCHEDULE 68) 
of simulation sub-system 66, that when sub-system 66 is 
activated messages originating in simulation sub-system 66 
are presented to the appropriate NICs of real system 64 
slightly ahead of analogous messages originating within sys- 
tem 64 (controlled by E-SCHEDULE 60). This is indicated 
symbolically by (At) block 69 relating E-SCHEDULE 60 and 
S-SCHEDULE 68 of FIG. 4 and fiirther illustrated in FIG. 5. 

FIG. 5 shows time scheduling chart 70 illustrating message 
transmission intervals associated with the system of FIG. 4 
that allows simulated data to be introduced to evaluate the 
behavior of the system of FIG. 4 under predetermined test 
conductions. FIG. 5 illustrates message transmission inter- 
vals 44E-/, 44E-(i+l) associated with E-SCHEDULE 60 of 
real physical system 64 and transmission intervals 44S-/, 
44S-(i+l) associated with S-SCHEDULE 68 of simulation 
sub-system 66, both on a common time line. Transmission 
window 44S-/, 44S-(i+l) for TT communication messages 
originating in simulation sub-system 66 operating under 
S-SCHEDULE 68 is advanced in time schedule by amount 
(At) compared to transmission window 44E-/, 44E-(i+l) for 
analogous messages originating in real physical system 64 
operating under E-SCHEDULE 60. This insures that the mes- 
sages originating from simulation elements 87, 88 arrive 
before any input messages arriving from real inputs 71, 72 
during the allowed communication interval. Because of the 
“first to arrive” preference built into TTE C&C systems using 
TT communication, the simulated “sensor” inputs from simu- 
lation elements 87, 88 are accepted in preference to any real 
inputs originating from real “sensors” 71, 72. Once simula- 
tion sub-system 66 is provided, this is accomplished without 
any physical modification of sensors 71, 72 or altering the 
connections thereto. This pennits the behavior of real system 
64 to be directly evaluated under the conditions represented 
by the simulation inputs, and without physical alteration of 
real system 64 or replacing sensors or changing the environ- 
mental conditions detected by the real sensors in real system 
64. 

The exact choice of At has to do with the synchronization 
precision of the system-under-test (SUT). At must be large 
enough to guarantee first arrival, but not so large as to be 
mistaken as a separate occurrence of the message. At is 
achieved by adjusting the TT communication message sched- 
ule event times in sub-system 66. The TTE synchronization 
protocol ensures that sub-systems 64 (the SUT) and 66 (the 
Simulator) will have a common, synchronous time base. It is 
the explicit timing of the message events in 66 (defined in 
S-SCHEDULE 68) that must be adjusted to occur early by At 
compared to the message events in 64 (defined in E-SCHED- 
ULE 60) that achieves the early arrival of the sensor messages 
from sub-system 66 to sub-system 64. Likewise, the TT com- 
munication message schedule in SUT 64 must be constructed 
with allowance for At in sub-system 66, and with proper 
tolerance on message arrival windows such that the early 
messages from sub-system 66 are not rejected. For systems 
using what is referred to as “Gigabit Ethernet” (e.g., 
1000BASE-T, 1000BASE-CX, 1000BASE-SX, 1000BASE- 
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LX, etc.), it has been found that schedule modification times 
At in the range of 1 5 to 30 microseconds are useful, with about 
20 microseconds preferred, but longer and shorter times may 
also be used depending upon the particular TTE C&C system 
being evaluated. For systems using what is referred to as “100 5 
Megabit Ethernet” (e.g., 100BASE-TX, 100BASE-FX, etc.), 
it has been found that schedule modification times At in the 
range of 1 50 to 300 microseconds are useful, with about 200 
microseconds preferred, but longer and shorter times may 
also be used depending upon the particular TTE C&C system to 
being evaluated. For systems using what is referred to as “10 
Megabit Ethernet” (e.g., 10BASE-T, etc.), it has been found 
that schedule modification times At in the range of 1 500 to 
3000 microseconds are useful, with about 2000 microseconds 
preferred, but longer and shorter times may also be used 15 
depending upon the particular TTE C&C system being evalu- 
ated. Stated another way, At should be at least about 15 
microseconds. 

To give a simple example, assume that the behavior of the 
C&C system of an aircraft is desired to be observed in 20 
response to a change in external air pressure, with other 
environmental variables remaining the same. To perform a 
physical test of such C&C system if would be necessary to 
locally modify the air pressure surrounding the aircraft or the 
real pressure sensor, which may be a formidable and expen- 25 
sive task. Using the arrangement of system 62, the simulated 
external air pressure data is substituted via simulation sub- 
system 66 and the behavior of the aircraft C&C system 
directly observed without any need to modify the real physi- 
cal environment in which the plane or the real sensor is 30 
located. This is an extremely useful capability of great prac- 
tical significance for evaluating the performance of very com- 
plex C&C systems under a variety of pre-determinable varia- 
tions in stimuli or other parameters. Based on the explanation 
herein, persons of skill in the art will understand that as many 35 
different input parameters as desired may be substituted, one 
at a time or concurrently, as are necessary to achieve the 
objectives of the test or simulation. 

While at least one exemplary embodiment has been pre- 
sented in the foregoing detailed descript ion of the invention, 40 
it should be appreciated that a vast number of variations exist. 

It should also be appreciated that the exemplary embodiment 
or exemplary embodiments are only examples, and are not 
intended to limit the scope, applicability, or configuration of 
the invention in any way. Rather, the foregoing detailed 45 
description will provide those skilled in the art with a conve- 
nient road map for implementing an exemplary embodiment 
of the invention. It being understood that various changes 
may be made in the function and arrangement of elements 
described in an exemplary embodiment without departing 50 
from the scope of the invention as set forth in the appended 
claims. 

What is claimed is: 

1. A method is provided for in-place testing of Time Trig- 
gered Ethernet (TTE) command and control (C&C) system 55 
having real input devices and output interfaces that commu- 
nicate through one or more switches during first predeter- 
mined time intervals set by a time scheduling system associ- 
ated with the C&C system as to when outputs from the real 
input devices can be sent to the output interfaces, comprising: 60 

providing a simulation subsystem having therein simulated 
input devices adapted to provide predetennined or 
dynamically calculated outputs mimicking the outputs 
of the real input devices and communicating with the 
output interfaces through at least a further switch during 65 
second predetermined time intervals set by a time sched- 
uling system associated with the simulation subsystem 
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system as to when outputs from the simulated input 
devices can be sent to the output interfaces; and 

adjusting the second predetennined time intervals relative 
to the first predetennined time intervals, so that the out- 
puts from the simulated input devices arrive at the output 
interfaces prior to the outputs from the real input 
devices. 

2 . The method of claim 1 , wherein the adjusting step com- 
prises adjusting the second predetennined time intervals rela- 
tive to the first predetermined time intervals, so that the inputs 
from the simulated inputs arrive at the one or more output 
interfaces prior to the inputs from the input devices by an 
amount At of at least about 15 microseconds. 

3 . The method of claim 1 , wherein At is in the range of 
about 1 50 to 300 microseconds for systems using 1 00 Mega- 
bit Ethernet. 

4 . The method of claim 1 , wherein At is in the range of 
about 1 500 to 3000 microseconds for systems using 1 0 Mega- 
bit Ethernet. 

5 . The method of claim 1 , wherein the one or more output 
interfaces comprise serially coupled network interface con- 
trollers and output elements, and wherein the network inter- 
face controllers determine for each serially coupled output 
element the relative time of arrival of outputs from the input 
devices and outputs from the simulated input devices, and 
transmit only the first to arrive to the serially coupled output 
elements. 

6. The method of claim 5, wherein the serially coupled 
output elements comprise one or more computers or control 
elements and at least one effector, and wherein the one or 
more computers or control elements receive the first to arrive 
outputs front the input devices, transform them and send them 
to the at least one effector to change the state thereof. 

7 . The method of claim 1 , wherein the one or more output 
interfaces comprises an actuator and at least one computer or 
control element, and the simulated output from the simulated 
input devices is received first by the at least one computer or 
control element, modified therein and then transmitted to the 
actuator to change the state of the actuator. 

8. The method of claim 7, wherein the one or more output 
interfaces further comprise network interface controllers seri- 
ally coupled to the actuator and the at least one computer or 
control element for determining which of the outputs from the 
input devices and the outputs from the simulated input 
devices is the first to arrive and then sending the first to arrive 
outputs to the at least one computer or control element. 

9 . A system having built-in test simulation capability, com- 
prising: 

a real sub-system portion of the system, comprising: 
one or more real input sensors; 
one or more output interfaces; and 
one or more first switches coupling the real input sensors 
and the one or more output interfaces; 

wherein the real input sensors, first switches and one or 
more output interfaces communicate under a Time Trig- 
gered Ethernet (TTE) control and communication 
(C&C) protocol wherein messages from the real input 
sensors to the one or more output interfaces are Time 
Triggered (TT) communications messages occurring 
during a predetennined first time interval established by 
a time schedule operation of the real sub-system portion 
of the system; and 

a simulation sub-system portion of the system, comprising: 
one or more input simulators adapted to provide prede- 
termined or dynamically calculated output values 
mimicking operation of the real input sensors over a 
desired range of output values; and 
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one or more second switches adapted to couple the out- 
put values from the one or more input simulators to 
the one or more output interfaces under a Time Trig- 
gered Ethernet (TTE) control and communication 
(C&C) protocol; 5 

wherein messages from the input simulators to the one or 
more output interfaces are Time Triggered (TT) commu- 
nications occurring during a predetermined second time 
interval at least partly overlapping the first time interval 
and established by a time schedule controlling operation to 
of the simulation sub-system portion of the system, 
wherein a beginning of the second time interval precedes 
a beginning of the first time interval by an amount At. 

10. The system of claim 9, wherein the amount At is at least 

about 15 microseconds. 15 

11. The system of claim 9, wherein At lies in the range of 
about 1 50 to 300 microseconds for systems using 1 00 Mega- 
bit Ethernet. 

12. The system of claim 9, wherein At lies in the range of 
about 1 500 to 3000 microseconds for systems using 1 0 Mega- 20 
bit Ethernet. 

13. The system of claim 9, wherein the one or more output 
interfaces comprise serially coupled network interface con- 
trollers and output elements, and wherein the network inter- 
face controllers determine which of the output values from 25 
the input simulators or the real inputs is first to arrive and 
sending the first to arrive to the output elements. 

14. The system of claim 13, wherein the serially coupled 
output elements comprise one or more computers or control 
elements and at least one effector, and wherein the one or 30 
more computers or control elements receive the first to arrive 
outputs, transform them and send them to the at least one 
effector to change the state thereof. 

15. The system of claim 9, wherein the one or more output 
interfaces comprises an actuator and at least one computer or 35 
control element, and the output from the input simulators is 
received first by the at least one computer or control element, 
modified therein and then transmitted to the actuator to 
change the state of the actuator. 

16. The system of claim 15, wherein the one or more output 40 
interfaces further comprise network interface controllers seri- 
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ally coupled to the actuator and the at least one computer or 
control element for determining which of the outputs from the 
input sensors and simulated outputs from the simulated input 
sensors is the first to arrive and then sending the first to arrive 
inputs to the at least one computer or control element. 

17. An apparatus for evaluating the performance of a con- 
trol and communication (C&C) system, comprising: 

a real physical Time Triggered Ethernet (TTE) control and 
communication (C&C) system under test (SUT), com- 
prising real input elements, adapted to communicate 
using time triggered (TT) communication protocols 
with real output elements via one or more first switches 
during a first time interval schedule established for the 
SUT; 

a simulation system having input simulators that commu- 
nicate using TT communication with the real output 
elements via one or more second switches during a sec- 
ond time interval schedule established for the simulation 
system; 

wherein the first and second time interval schedules are 
off-set by amount At so that messages from the input 
simulators when present arrive at the output elements 
prior to messages from the real input elements, thereby 
having priority over messages from the real input ele- 
ments and causing the system to operate based on the 
messages from the input simulators when present. 

18. The apparatus of claim 17, wherein the amount At is at 
least about 15 microseconds. 

19. The apparatus of claim 17, wherein, the output ele- 
ments comprise one or more serially coupled network inter- 
face controllers and output processors or effectors. 

20. The apparatus of claim 17, wherein, the output ele- 
ments comprise one or more network interface controllers 
adapted to receive signals transmitted by the one or more first 
and second switches and send them to one or more output 
processors for manipulating the signals received from the first 
and second switches and transmitting such manipulated sig- 
nals to an effector to change its state. 



